$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: mlCOazWeV5YpqxcHMbIemnqt+zgbROeBLvo+W8vlKjA= Subject key identifier: 63:0B:5D:B2:AD:0F:B3:E0:E6:C6:FF:00:A9:F9:1A:64:DD:6A:D5:58 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 3FBC65F9949C2C44E566FCCA770EB6847667E627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 010D Signing time: Tue 06 May 2025 15:20:36 +0000 Manifest this update: Tue 06 May 2025 15:15:36 +0000 Manifest next update: Fri 09 May 2025 20:06:36 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: jhVJCbKQXL2nFe+ONwz9c4/7N7M53cCiJBZHaRDMCi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bc:65:f9:94:9c:2c:44:e5:66:fc:ca:77:0e:b6:84:76:67:e6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: May 6 15:15:36 2025 GMT Not After : May 9 20:06:36 2025 GMT Subject: CN=630B5DB2AD0FB3E0E6C6FF00A9F91A64DD6AD558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:78:de:bf:d7:5d:eb:1f:96:d5:b5:06:c7: 16:fa:c5:8b:84:75:42:58:19:02:2b:79:ea:1b:d1: 87:2b:b5:2c:01:1d:88:09:5d:b8:80:31:3d:dd:e9: 0d:32:29:55:f2:68:82:f2:e2:1c:af:4a:03:bb:eb: 23:a6:02:89:0f:34:f0:70:f3:6c:73:cc:ae:99:2c: c1:a5:54:ef:6c:44:07:14:45:36:60:86:fd:f1:ea: 34:4c:37:ce:c4:1e:f8:b1:a9:4f:9e:8c:a8:94:58: ce:dd:2a:b9:17:9d:a4:b2:5d:4b:c1:10:e4:1a:2a: d6:1d:39:10:a6:c8:69:8d:83:5c:29:e7:59:d2:a8: 0c:f9:88:32:45:01:df:cd:f4:6e:dd:82:ea:7f:28: a5:a6:c6:9b:79:e4:97:67:8d:e2:43:0a:fb:a9:f6: c3:20:20:7e:64:56:c7:c6:1a:dd:13:1e:be:62:9a: 5f:dc:fb:39:15:7d:01:3d:15:da:5b:b7:8d:59:c5: 93:1b:34:58:11:35:42:48:b5:cc:d9:67:93:3a:54: 28:37:66:3b:27:75:d8:68:74:77:1c:1d:92:b3:00: 02:a0:17:e3:45:7d:db:09:d9:17:63:bd:59:6e:45: 5c:87:3b:5a:ef:05:c1:a2:52:c2:97:49:e6:9b:c8: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:5D:B2:AD:0F:B3:E0:E6:C6:FF:00:A9:F9:1A:64:DD:6A:D5:58 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:66:01:2c:81:b8:14:02:3d:56:5b:4d:7c:d0:7e:32:0c:93: bf:b1:03:80:24:62:38:b1:9a:2c:20:c7:c6:72:6a:29:6b:1e: e1:d9:63:99:4e:4e:8b:b9:d4:c0:94:f1:09:7d:34:57:7e:16: 9d:a5:2a:b2:71:6d:29:37:af:fb:53:03:5d:fa:e8:7c:d4:4d: b3:7b:ab:55:15:7b:69:90:68:a9:4f:73:b0:1e:85:69:88:31: fd:30:66:9e:bd:3e:5f:a4:91:96:59:05:c0:a6:eb:25:8d:5b: 84:dc:c9:be:b7:6c:50:38:cb:70:e9:78:ec:a8:a9:f1:78:64: 07:1b:cd:3f:7b:cf:bf:bf:11:f7:08:fe:1c:b1:2c:b7:2d:af: cd:5f:95:70:ff:6f:07:c0:54:1b:f0:43:91:e5:e1:ba:64:64: e4:72:ac:4d:b2:80:47:3b:f4:df:63:87:6b:99:95:ce:89:17: 3b:d3:4e:77:e3:c1:33:6f:ba:53:d9:2d:45:ec:33:18:02:d5: aa:52:90:cf:59:81:d6:0b:f3:95:6d:ae:71:22:15:bf:d4:6f: e6:29:68:cf:a2:f0:cb:aa:d8:35:ed:43:94:12:9a:26:92:a1: b6:bb:6c:a5:55:df:40:d1:d1:89:15:e7:a7:ab:51:af:4c:6d: e8:24:89:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7xl+ZScLETlZvzKdw62hHZn5icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTA1MDYxNTE1MzZaFw0yNTA1MDkyMDA2MzZaMDMxMTAvBgNV BAMTKDYzMEI1REIyQUQwRkIzRTBFNkM2RkYwMEE5RjkxQTY0REQ2QUQ1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkw3jev9dd6x+W1bUGxxb6xYuE dUJYGQIreeob0YcrtSwBHYgJXbiAMT3d6Q0yKVXyaILy4hyvSgO76yOmAokPNPBw 82xzzK6ZLMGlVO9sRAcURTZghv3x6jRMN87EHvixqU+ejKiUWM7dKrkXnaSyXUvB EOQaKtYdORCmyGmNg1wp51nSqAz5iDJFAd/N9G7dgup/KKWmxpt55JdnjeJDCvup 9sMgIH5kVsfGGt0THr5iml/c+zkVfQE9Fdpbt41ZxZMbNFgRNUJItczZZ5M6VCg3 ZjsnddhodHccHZKzAAKgF+NFfdsJ2RdjvVluRVyHO1rvBcGiUsKXSeabyPoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwtdsq0Ps+Dmxv8AqfkaZN1q1VgwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtmASyBuBQCPVZbTXzQfjIMk7+xA4AkYjix miwgx8ZyailrHuHZY5lOTou51MCU8Ql9NFd+Fp2lKrJxbSk3r/tTA1366HzUTbN7 q1UVe2mQaKlPc7AehWmIMf0wZp69Pl+kkZZZBcCm6yWNW4Tcyb63bFA4y3DpeOyo qfF4ZAcbzT97z7+/EfcI/hyxLLctr81flXD/bwfAVBvwQ5Hl4bpkZORyrE2ygEc7 9N9jh2uZlc6JFzvTTnfjwTNvulPZLUXsMxgC1apSkM9ZgdYL85VtrnEiFb/Ub+Yp aM+i8Muq2DXtQ5QSmiaSoba7bKVV30DR0YkV56erUa9MbegkiYA= -----END CERTIFICATE-----Generated at Thu May 8 10:04:29 2025 by rpki-client